selinux: generate flask headers during kernel build
Add a simple utility (scripts/selinux/genheaders) and invoke it to generate the kernel-private class and permission indices in flask.h and av_permissions.h automatically during the kernel build from the security class mapping definitions in classmap.h. Adding new kernel classes and permissions can then be done just by adding them to classmap.h. Signed-off-by:Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by:
James Morris <jmorris@namei.org>
Showing
- scripts/selinux/Makefile 2 additions, 2 deletionsscripts/selinux/Makefile
- scripts/selinux/genheaders/Makefile 5 additions, 0 deletionsscripts/selinux/genheaders/Makefile
- scripts/selinux/genheaders/genheaders.c 118 additions, 0 deletionsscripts/selinux/genheaders/genheaders.c
- security/selinux/Makefile 9 additions, 1 deletionsecurity/selinux/Makefile
- security/selinux/include/av_permissions.h 0 additions, 870 deletionssecurity/selinux/include/av_permissions.h
- security/selinux/include/flask.h 0 additions, 91 deletionssecurity/selinux/include/flask.h
- security/selinux/ss/Makefile 1 addition, 1 deletionsecurity/selinux/ss/Makefile
Loading
Please register or sign in to comment